Your network consists of a single Active Directory domain. The network includes a branch office
named Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An
organizational unit (OU) named Branch1Servers contains the computer objects for the servers in
Branch1. A global group named Branch1admins contains the user accounts for the administrators.
Administrators maintain all member servers in Branch1. You need to recommend a solution that
allows the members of Branch1admins group to perform the following tasks on the Branch1
member servers.
• Stop and start services
• Change registry settings
What should you recommend?
A.
Add the Branch1admins group to the Power Users local group on each server in Branch1.
B.
Add the Branch1admins group to the Administrators local group on each server in Branch1.
C.
Assign the Branch1admins group change permissions to the Branch1Servers OU and to all child
objects.
D.
Assign the Branch1admins group Full Control permissions on the Branch1Servers OU and to all
child objects.
Explanation:
Local admins have these rights.
Power Users do not
By default, members of the power users group have no more user rights or permissions than a
standard user account. The Power Users group in previous versions of Windows was designed to
give users specific administrator rights and permissions to perform common system tasks. In this
version of Windows, standard user accounts inherently have the ability to perform most common
configuration tasks, such as changing time zones. For legacy applications that require the same
Power User rights and permissions that were present in previous versions of Windows,
administrators can apply a security template that enables the Power Users group to assume the
same rights and permissions that were present in previous versions of Windows.